EIP-2026-114285

This PoC demonstrates a CSRF vulnerability in the Yet Another Related Posts Plugin (YARPP) for WordPress, allowing an attacker to inject malicious JavaScript via unprotected option updates. The exploit tricks an admin into submitting a form that modifies plugin settings, leading to XSS execution when the injected code is triggered.